Regexp attribute filter declared safe in JS if the regexp is one of the few known safe expressions